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J The  Increasing  sophistication  of  Intelligence  collection' 
and  analysis  systems  has  given  US  decision  matters  a 
powerful  tool  to  evaluate  the  actions  and  Intentions  of  our 
potential  adversaries.  At  the  same  time,  however,  these 
advances  have  In  some  respects  Increased  our  susceptabllity 
to  the  skillful  use  of  cover  and  deception  techniques. 
Throughout  history,  the  potential  success  of  t> 
operations  has  been  determined  soley  by  the  skill  of  the 
practitioner,  regardless  of  the  sophistication  of  the  Intended 
victim  In  conducting  C 4c  D operations.  Today,  we  face  Ir. 
the  Soviet  Union  a nation  which  has  both  recognized  the 
Importance  of  C 4c  D and  has  over  the  years  demonstrated 
an  impressive  capability  to  deceive  and  mislead  both  its 
Intended  victims  and  the  US  and  Its  allies.  This  paper 
outlines  the  salient  characteristics  of  C 4c  D,  Soviet 
doctrine  and  application  and  some  of  the  techniques  which 
could  be  used  to  uncover  cover  and  defeat  deception.  

The  Operational  Context  for  Cover  and  Deception 


What  Is  C 4c  D? 

"Cover"  denies  an  adversary  the  Intelligence  data 
needed  to  plan  and  carry  out  operations,  and  It  Includes  both 
camouflage  and  avoidance.  Camouflage  can  be  either 
passive,  In  which  case  It  attempts  to  make  the  threatening 
activity  appear  either  benign  or  not  appear  at  all,  or  active, 
In  which  threatening  activity  Is  simulated  where  It  does  not, 
in  fact,  exist.  Avoidance  exploits  knowledge  of  the 
adversary's  collection  capabilities  and  operational  use  to 
deny  reconnaissance  opportunity. 

"Deception"  seeks  to  use  both  camouflage  and 
avoidance,  together  with  genuine  but  misleading  activity,  to 
manage  an  adversary's  perception  of  events,  capabilities  and 
planned  actions. 

A skillful  user  of  C 4c  D seeks  to  provide  an  adversary 
with  pieces  of  Information  which  appear  genuine  In  them- 
selves, and  which  fit  a course  of  action  which  the  adversary 
would  find  reasonable.  In  this,  the  C 4c  D practitioner 
attempts  to  exploit  the  anchoring  bias  of  the  cognitive 
process  [1],  by  presenting  the  strongest  Indications  of  the 
deception  story  first,  if  the  Intended  victim  has  already 
formed  an  estimate  of  the  most  likely  course  of  action,  the 
practitioner  need  only  take  those  actions  necessary  to 
provide  substantiating  evidence.  Once  the  victim  has 
focused  on  a single  most  likely  course  of  action,  receipt  of 
later  Information  will  be  evaluated  In  terms  of  whether  or 
not  It  matches  the  current  hypothesis.  The  victim  may  then 
Ignore  contradictory  evidence,  fit  ambiguous  evidence  to 
match  the  hypothesis  as  If  no  ambiguity  existed,  and  accept 
deceptive  activity  with  little  scrutiny. 

Cover  and  Deception  and  the  Intelligence  Process 

The  use  of  C 4t  D extends  across  the  conflict  spectrum, 
and  applies  to  other  dlmenrlons  of  mlUtary/politlcal 
analysis.  Cover  and  deception  has  been  successfully  applied 


to  manage  perceptions  during  peacetime,  crisis  and  war. 
Similarly,  C 4c  D Is  a major  concern  In  successful  application 
of  arms  control  and  to  the  maintaining  the  validity  of  a 
deterrence  policy.  The  operational  context  for  C 4c  D Is 
shown  in  Figure  1. 

The  opposing  decision-maker  selects  both  an  operations 
plan  and  a C 4t  D plan,  the  first  to  achelve  his  objectives, 
and  the  second  to  manage  friendly  perceptions  In  such  a way 
that  counter-action  will  be  misdirected  or  mistimed.  These 
plans  are  executed  as  a course  of  action  (1),  apects  of  which 
can  be  observed  If  friendly  collection  assets  are  present  and 
active  when  they  occur  (2),  Threat  assessment  (3)  attempts 
to  correlate  Information  collected  with  a concept  of  how 
opposing  forces  would  be  used  under  a variety  of 
circumstances,  to  produce  an  evaluation  of  what  the 
opposing  forces  are  trying  to  do.  The  friendly  decision 
maker  then  selects  a response  (A),  based  on  set  policy  and 
the  capabilities  of  his  own  assets. 

The  principle  objective  of  the  Intelligence  process  Is 
knowledge  the  opposing  decision-maker's  plan.  Usually,  this 
cannot  be  gained  directly.  Further,  the  raw  data  which  the 
Intelligence  system  receives  Is  limited  both  by  the 
attributes  of  military  activity  which  are  observable  and  by 
the  time  slices  when  collectors  are  actually  tasked  to 
collect.  Finally,  the  Interpretation  of  activity  depends  on 
the  accuracy  of  our  concept  of  the  opponent's  force 
procedures.  Even  without  any  Intent  to  deceive  by  an 
opponent,  the  limitations  of  the  Intelligence  process  would 
leave  us  with  an  Incomplete  and  sometimes  misleading 
picture  of  his  activities  and  objectives, 

The  threat  assessment  process  Is  vulnerable  to  C 4c  D at 
each  step.  Figure  2 decomposes  the  process,  and  shows  the 
opportunities  for  a skillful  opponent  to  employ  C 4c  D.  To 
begin  with,  an  adversary  can  control  the  timing  and  type  of 
activity  by  his  forces  to  manage  our  perception  of  the 
observable  features  of  his  course  of  action.  Assuming  that 
an  analyst  began  with  an  accurate  baseline  of  enemy 
locations  and  activity,  this  type  of  deception  would  cause 
errors  In  threat  situation  monltorlng-monltorlng  the  current 
state  of  enemy  forces.  At  this  point,  the  opponent  loses 
direct  control  over  his  ability  to  manage  perception,  but 
must  rely  on  the  weaknesses  of  our  Intelligence  analysis 
system.  The  opponent’s  C 4c  D plan  attempts  to  orchestrate 
observable  activity  so  that  collection  distortions  and 
Interpretation  errors  are  propagated  through  the  higher 
levels  of  Intelligence  analysis. 

indications  analysis,  relying  on  an  Incorrect  statement 
of  the  current  situation,  will  misdirect  requests  for 
additional  collection.  Key  activities  will  be  missed,  and 
others  will  be  assessed  as  having  occurred  when  they  have 
only  been  simulated.  The  final  step  In  the  process,  threat 
synthesis,  matches  key  activities  with  the  hypothesized  set 
of  courses  of  actions.  If  those  key  activities  are  not 
correctly  Identified,  or  If  the  set  of  courses  of  action  Is 
Incomplete,  an  incorrect  assessment  of  the  opposing 
decision-maker's  Intentions  will  be  given  to  our  own 
commanders. 
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FIGURE  1 OPERATIONAL  CONTEXT  FOR  C&D 
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FIGURE  2 THREAT  ASSESSMENT  VULNERABILITIES  TO  CAD 


Unfortunately,  many  of  the  developments  In  Intelligence 
systems  In  recent  years  have  Increased  our  vulnerability  to 
C It  at  the  same  time  that  they  have  increased  our  ability 
to  collect  data  and  to  analyze  activity.  Together  with  a 
greatly  Increased  ability  to  collect,  we  have  developed 
systems  to  help  the  human  analyst  exploit  that  capability  by 
focusing  attention  on  Items  which  analysts  have  identified 
as  keys.[7  ] Thus,  each  enemy  course  of  action  can  be  broken 
down  Into  indicators-steps  which  must  be  taken  to  realize 
that  action,  Indicators  Into  key  activities,  activities  Into 
observables.  The  result  Is  a system  of  great  power  for 
focusing  attention  on  significant  pieces  of  information  and 
for  leading  to  conclusions  of  Intent  based  upon  a clear  path 
of  reasoning.  The  weakness  of  this  system  Is  that  the 
discriminators  at  each  step  become  high  value  targets  for  an 
opponent's  C k P activities,  and  as  we  discuss  In  the  next 
section,  It  Is  highly  likely  that  the  Soviets  will  attempt  to 
exploit  this  weakness, 

Soviet  Cover  and  Deception  Doctrlnu  and  Applications 

Extensive  use  of  cover  and  deception  techniques  in  the 
tactical  environment  are  basic  tenets  of  Soviet  military 
doctrine.  Natural  Soviet  proclivity  to  secretiveness  coupled 
with  Soviet  experience  and  lessons  learned  over  the  last 
thirty  years  have  convinced  Soviet  leaders  that  cover  and 
deception  are  Invaluable  tools  In  tactical  warfare.  These 
attitudes  have  undoubtedly  been  strengthened  by  the 
successful  application  of  C&P  by  both  Arabs  and  Israelis  In 
the  Middle  East  wars,  and  by  the  British  In  the  Falk  lands. 

The  commonly  held  Western  appreciations  of  Soviet 
C&P  capabilities  may  already  be  out  of  date.  The  Soviets 
have  repeatedly  demonstrated  their  ability  to  make  the 
Improvements  necessary  to  bring  capability  in  other  fields 
up  to  the  demands  of  doctrine.  A clear  example  of  this  Is 
the  comparatively  recent  development  and  mass  deployment 
of  equipment  (such  as  the  KIROV-class  VSTOL  carrier) 
which  make  the  extension  of  Soviet  offensive  doctrine  Into 
the  naval  domain  a credible  threat  to  NATO.  A 
corresponding  effort  to  Increase  the  level  and  sophistication 
of  their  C&P  capabilities  can  therefore  be  hypothesized  as  a 
most  likely  Soviet  course  of  action. 

Soviet  Cover  and  Peceptlon  Doctrine 

Soviet  doctrine  for  Cover  and  Peceptlon  derives  from 
the  doctrinal  requirement  for  surprise,  one  of  the  basic 
principles  of  what  the  Soviets  call  "operational  art".  These 
basic  principles,  In  the  order  assigned  by  the  Soviet  author 
Savkln  [3],  Include! 

• Moblllty/Tempo 

• Concentration  of  Efforts 

• Surprise 

• Activeness  of  Combat 

• Preservation  of  Effectiveness 

• Conformity  of  Coals  to  Conditions 

• Interworking 

Mobllty/Tempo  Includes  not  only  speed  of  movement 
but  also  flexibility  , such  as  In  changing  the  axis  of  an 
attack.  Concentration  of  efforts  Is  more  familiar  to  us  as 
the  principles  of  mass  and  economy  of  force.  By  "Surprise", 
the  Soviets  mean  the  ability  to  force  an  enemy  to  fight  In  a 
situation  unfavorable  to  him-  either  In  a place  or  time  which 
does  not  allow  him  to  make  full  use  of  his  own  forces, 
"Activeness  of  combat"  states  the  Soviet  desire  to  hold  the 
Initiative  t this  is  also  the  principle  of  the  offensive, 
"Preservation  of  Effectiveness"  is  the  Soviet  reaction  to  the 
advent  of  weapons  of  mass  destruction,  which  require  that 
their  forces  avoid  premature  concentration,  and  that  they 
be  equipped  to  survive  In  a CBR  environment,  "Conformity 
of  Goals  to  Conditions"  demands  that  the  commander  assign 
reasonable  goals  to  his  forces.  Because  commanders  adhere 
to  this  principle,  the  subordinates  can  therefore  be  held 


accountable  for  any  failure.  "Interworking"  is  the  basis  for 
the  Soviet  combined  arms  approach  to  military  operations. 
Interworking  refers  not  only  to  the  coordination  ieadlng  to 
iolnt  efforts  by  combat  forces,  but  also  to  the  coordination 
of  front  and  reserve  units,  combat  and  support  units,  center 
and  flanks. 

One  of  the  significant  features  of  these  principles  Is  the 
degree  to  which  each  Is  often  Implemented  In  terms  of  the 
others.  A surprised  enemy,  for  example,  is  given  no  time  to 
recover  If  the  attacking  forces  maintain  the  tempo  of  their 
attack,  and  keep  the  Initiative.  Also,  the  dispersion  prior  to 
attack  necessary  to  preserve  combat  effectiveness  makes  It 
more  difficult  for  the  enemy  to  determine  the  time  and 
place  of  an  attack.  Finally,  the  Soviets  achieve  consistency 
In  their  deception  plans  by  a combined  arms  approach  to 
CirP  operations. 

In  the  discussion  of  methods  to  achieve  surprise,  Savkln 
[4],  mentions  six  Reneral  typest 

e Lead  the  eremy  astray 
• Secrecy  of  Preparation 
e Unexpected  Use  of  Nuclera  Weapons 
e Deliver  attacks  at  Unexpected  place/time 
e New  means/methods  of  warfare 
e Avoid  repetition  of  methods 

The  first  of  these  methods,  leading  the  enemy  astray 
with  regard  to  one's  Intended  course  of  action,  Is  the 
doctrinal  basis  for  Soviet  deception  operations,  just  as 
secrecy  of  preparation  1*  the  hals  for  the  widespread  Soviet 
use  of  cover  and  camouflage  for  offensive  purposes.  The 
last  two  methods  are  useful  In  understanding  how  the 
Soviets  have  been  able  to  continue  to  surprise  their 
opponents  In  Intervention  uctlons  over  the  past  thirty 
years.  In  his  discussion  of  "new  means  and  methods  of 
warfare",  Savkln  explains  that  this  is  usually  achelved  by 
using  existing  means  In  ways  unknown  to  an  enemy,  rather 
than  by  the  introduction  of  a totally  new  capability.  This, 
together  with  the  avoidance  of  repetition  In  the  methods  of 
operations,  Including  deception  operations,  put  our 
Intelligence  system  on  notice  that  hypotheses  limited  to 
past  patterns  of  Soviet  actions  not  only  fall  as  aids  to 
detection  of  new  patterns,  but  also  Increase  the  probability 
that  the  Soviets  will  exploit  our  tendancy  to  correlate  the 
elements  of  a new  course  of  action  with  an  old  one. 

Soviet  ("ftp  Experience 

A brief  summarization  of  four  Soviet  C&P  operations, 
beginning  with  the  successful  preparations  for  Operation 
Bagration  In  the  summer  of  194k,  [3] Illustrates  how  far  the 
Soviets  have  progressed  In  the  ability  to  lead  their 
opponents  astray.  Knowing  the  German  preoccupation  with 
defending  their  economic  base,  In  this  case  the  Ukraine,  the 
Soviets  covered  their  preparations  for  an  attack  In 
Belorussla  through  denying  the  Germans  any  Information 
that  would  contradict  that  hypothesis.  For  this  reason,  the 
5ovlets  moved  their  forces  to  their  jump-off  positions  under 
the  cover  of  darkness,  and  spread  the  observable  Indicators 
of  Impending  attack  over  the  entire  eastern  front-  aerial 
reconnaissance,  bomber  sorties  and  air  defense  were  not 
concentrated  In  the  central  front.  Communications  activity 
by  units  dedicated  to  the  attack  was  kept  to  a minimum. 
Although  the  Germans  expected  a summer  offensive,  Soviet 
security  precautions  together  with  German  assessment  that 
the  most  likely  location  for  an  attack  was  the  area  which 
they  most  feared  to  lose,  combined  to  leave  the  Germans 
unprepared  for  the  Soviet  assault.  A significant  difference 
between  the  Soviet  C&P  operations  and  the  coincident 
US/Brltlsh  effort  to  deceive  the  Germans  as  to  the  location 
of  the  cross-channel  landing,  however,  was  that  the 
deception  ended  when  the  attack  began.  This  difference  has 
continued  In  Soviet  operations  to  this  day. 
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In  their  preparation*  for  Intervention  In  Czechoslovakia 
in  196S,  the  Soviets  exploited  both  Western  and  Czech 
preconceptions  of  the  sequence  of  events  which  would 
precede  such  an  action,  in  1936,  the  Soviets  had  called  the 
Hungarian  leaders  to  Moscow  and  then  Invaded.  In  196S,  the 
Soviets  moved  their  forces  to  the  military  districts 
bordering  Czechoslovakia  for  a long  series  of  exercises, 
summoned  the  Czech  leaders  to  Moscow,  and  did  not 
Invade.  Instead,  the  Czechs  were  allowed  to  return  horn 
believing  the  Soviets  would  withhold  action  as  long  as  the 
Czechs  committed  no  excesses  of  liberalization.  Some 
Soviet  units  were  recalled  from  the  border  areas.  Although 
the  Soviets  still  had  sufficient  force  in  place  to  Intervene, 
both  Czechs  and  the  West  changed  their  assessment  of 
Soviet  Intentions.  Both  were  therefore  unprepared  when  the 
Soviets,  with  token  elements  of  other  Warsaw  Pact  nations, 
Invaded  In  August.  It  Is  likely  that  at  least  part  of  the 
reason  for  the  timing  of  the  Invasion  was  to  coincide  with 
the  summer  vacation  season  In  Europe,  when  many  European 
decision  makers  would  be  or  vacation.  In  addition,  the 
Soviets  used  a ruse  to  gain  control  of  the  main  airfield 
outside  of  Prague,  sending  the  landing  control  party  on  an 
Aeroflot  flight  dressed  as  tourists.  The  "tourists"  easily 
overpowered  the  Czech  control  tower  personnel  and  then 
proceeded  to  handle  the  landing  of  the  aircraft  carrying  the 
leading  elements  of  the  invasion  force. 

The  Soviet  Invasion  of  Afghanistan  [6]  Is  a good 
Illustration  of  how  the  Soviets  were  able  to  achieve  the 
same  end-control  of  the  captlal  city  airfield  - while  varying 
the  means.  This  time  the  Soviets  flew  in  the  airfield  control 
party  weeks  be.'ore  the  invasion  as  reinforcements  for 
Soviet  units  already  deployed  there  since  September,  thus 
arrousing  no  curiosity.  The  Soviets  then  disarmed  the 
Afghani  armored  forces  by  recalling  the  Afghan  ammunition 
and  anti-tank  gum  for  inventory,  some  of  their  tanks  tor 
winterization  and  others  for  the  repair  of  defects.  Although 
western  intelligence  was  not  surprised  - the  US  had  warned 
the  Soviets  twice  against  intervening  In  Afghanlstan-the 
Soviet  choice  of  Christmas  as  the  invasion  date  meant  that 
any  Western  reaction  would  be  delayed  as  the  leaders 
hurried  back  from  their  vacations.  The  surprise  achieved 
against  the  Amin  government  is  reflected  by  the  ease  with 
which  Soviet  divisions  occupied  the  country. 

In  its  Initial  stages,  the  Soviet  reaction  to  the  Internal 
political  events  In  Poland  were  similar  to  those  of  196S.  [7] 
A long  series  of  large-scale  military  exorcises  were  held  in 
the  western  military  districts,  the  Polish  premier  visited 
Moscow,  and  no  immediate  invasion  occurred.  US  and 
NATO  intelligence  recognized  the  clear  threat  of 
intervention  behind  the  exercises,  and  exerted  diplomatic 
pressure  upon  the  Soviets  to  allow  the  Poles  to  settle  the 
party-union  conflict.  The  nature  and  timing  of  the  coup  in 
December  therefore  caught  both  Solidarity  and  the  US  and 
Its  Allies  by  surprise.  Again  the  Soviets  chose  a time 
(Sunday  morning  during  the  Christmas  season)  when  opposing 
decision  makers  would  be  at  home,  and  an  unexpected 
means-the  Polish  Internal  security  forces.  The  intended 
victims  of  the  deception  were  successfully  deceived  even 
though  quite  sensitive  to  the  possibility  of  deception.  The 
exercises  were  widely  perceived  as  a cover  for  the  Soviets' 
true  course  of  action,  but  this  knowledge  did  not  result  in 
correct  assessment  of  5ovlet  Intentions, 

In  each  of  the  cases  sketched  above,  a great  deal  of 
information  indicating  the  true  Soviet  courses  of  action  was 
available.  The  tactical  observables  of  the  Soviet 
preparations  were  collected.  The  capabilities  of  the  forces 
Involved  were  known  as  was  the  general  Intent.  In  each 
case,  however,  the  Soviets  succeeded  in  deceiving  their 
victims  as  to  timing  and  method.  This  series  of  successes 
makes  the  development  of  r*r'  countering  techniques, 
discussed  In  the  next  section,  a necessary  part  of  any  effort 
to  Improve  the  performance  of  our  own  intelligence  system. 


Developing  Techniques  to  Counter  Cover  and  Deception 

Countering  deception  is  a two-step  process.  The  first  Is 
to  Identify  the  targets  for  deception,  the  second  is  to 
identify  how  C&D  directed  against  those  targets  can  be 
recognized  and  then  exploited.  These  techniques  must  then 
be  Integrated  Into  both  sensor  related  improvements  and 
Into  the  development  of  expert  systems  and  other  A DP  tools 
for  Intelligence  analysis. 

Identifying  CikD  Vulnerabilities 

Identifying  C&D  vulnerabilities  can  benefit  from  the 
great  effort  already  expended  in  the  development  of 
structured  Indications  and  warning  systems.  These  systems 
break  down  a range  of  courses  of  action  Into  the  steps 
(Indicators)  required  to  achieve  them,  decompose  these 
steps  Into  their  key  activities,  and  then  Identify  the 
observables  associated  with  each  key  activity.  These 
observables  are  the  high  value  targets  for  C6D  operations, 
since  by  managing  an  opponent's  collection  of  these 
observables,  the  deceiver  exerts  control  on  the  bnsis  of  the 
victim's  perceptions.  In  order  to  understand  how 
perceptions  can  be  managed,  it  is  therefore  necessary  to 
begin  by  identifying  the  sources  and  methods  used  to  gather 
intelligence  data  (see  Figure  3).  Identifying  the  targets  of 
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FIGURE  3 COLLECTION  DISCIPLINES  AND  SENSORS 


C&D  Involves  a "reverse  engineering"  process  (see 
Figure  <t).  We  know  how  Individual  collection  sources  and 
disciplines  can  be  exploited  by  an  opponent  in  a general  way, 
and  we  know  which  disciplines  are  employed  tci  collect  given 
observable.  By  matching  collection  means  and  C&D 
methods  pairs  to  the  association  of  collection  means  and 
observables,  we  can  construct  a C&D  matrix  for  each  key 
activity.  Figure  5 presents  a sample  C&D  means  matrix  for 
one  possible  key  actlvity-the  deployment  forward  of  a 
technical  unit  (such  as  a bridging  unit).  Large  scale 
deployment  of  such  units  would  be  required  prior  to  the 
initiation  of  hostilities.  Each  row  in  the  matrix  summarizes 
how  the  observable  within  a particular  collection  discipline 
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FIGURE  4 DEVELOPING  TECHNIQUES  TO  COUNTER  CAD:  IDENTIFYING  VULNERABILITY 


ACTIVITY  TO  Bt  CONCEALED  OR  SIMULATED:  DEPLOY  TECHNICAL  UNIT  FORWARD 

COVER  t DECEPTION  MEANS 

AOINT 

•SIMULATE  SOUND  OF  VEHICLES 

OOMINT 

•MAINTAIN  NORMAL  LEVELS  OF  COMMUNICATIONS  AT  GARRISON  LOCATIONS  TO  MASK  MOVEMENT  OF  UNITS 
•MAINTAIN  STRICT  COMMUNICATIONS  SIUENCE  BY  THE  MOVING  UNITS 

ELINT 

•STAGGER  RADAR  CHECK-OUT  BEFORE  DEPLOYMENT  TO  SIMULATE  NORMAL  ACTIVITY 
• MAINTAIN  NORMAL  LEVELS  AND  TYPES  OF  RADAR  ACTIVITY  IN  GARRISON  ARtAS 

HUM  (NT 

•RELEASE  COVERING  EXPLANATION  FOR  ACTIVITY  (E.G,,  EXERCISE  ANNOUNCEMENT  TROOP  ROTATION) 

IRIHT 

•DEPLOY  THROUGH  AREAS  WITH  HIGH  LEVELS  OF  BACKGROUND  HEAT  (URBAN  AREAS,  MAJOR  ROADS) 

•DEPLOY  THROUGH  AREAS  WHICH  ABSORB  IR  EMISSIONS 

•SIMULATE  NORMAL  GARRISON  ACTIVITY  WITH  NONESSENTIAL  VEHICLES 

OPINT 

• CAMOUFLAGE  DEPLOYING  VEHICLES  AS  NON-MILITARY 

•SIMULATE  ESSENTIAL  VEHICLES  IN  GARRISON  WITH  NONESSENTIAL  ONES 

•MOVE  AT  NIGHT 

PHOTtm 

VDWNT 


♦SIMULATE  ESSENTIAL  VEHICLES  WITH  DUMMIES  IN  GARRISONS 

•DIVERT  FOREIGN  OBSERVERS  FROM  DEPLOYMENT  ROUTES 
•ALLOW  OBSERVERS  TO  SEE  STAGED  ACTIVITIES  ELSEWHERE 
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could  be  simulated.  The  more  elaborate  the  deception,  the 
greater  number  of  these  methods  would  be  employed,  and 
the  larger  the  number  of  units  simulated. 

Uncovet  lng  C&D  depends  upon  discovery  of 
Inconsistency.  The  Soviets  are  likely  to  apply  their  military 
doctrine  to  C.&n  operations,  In  that  they  will  strive  to 
achieve  consistency  with  the  least  effort 
necessary  (economy  of  force),  and  with  Integration  of  C6rn 
operations  In  all  domains  (Interworking).  To  counter  CitP 
therefore  means  to  progress  from  line  Items  In  the  means 
matrix  to  correlation  of  line  Items  In  the  matrix,  and  then 
to  the  higher  levels  of  the  Indications  structure,  as  well  as 
to  other  Intelligence  disciplines  (for  example,  the  order  of 
battle).  This  search  for  Inconsistency  takes  place  on  three 
levels,  each  demanding  a higher  level  of  man  (or  machine) 
Intelligence! 

• Single  collection  discipline 

• Multiple  collection  disciplines 

• Analytical  procedures  Involving  one  or  more 
intelligence  disciplines 

Each  technique,  properly  employed,  should  stretch  the 
deceiver's  web  of  consistency  In  the  observables  harder, 
until  finally  It  gives  way. 

Single  Plsclpllne  Techniques 

Single  discipline  techniques  address  the  weaknesses  In 
the  collection  and  Interpretation  chain,  and  can  be  divided 
Into  two  typesi 

• bringing  the  target  Into  the  field  of  view  and 

• Increasing  target  discrimination. 

Success  In  either  of  these  can  he  achieved  hy  Improving 
either  the  sensor  capabilities,  the  exploitation  processing,  or 
even  by  alerting  Interpreters  to  the  likelihood  of  a 
particular  CM"!  method. 

As  an  example  of  the  application  of  these  techniques, 
consider  an  enemy  attempting  to  deploy  SAM  units  forward, 
and  attempting  to  cover  the  radar  emissions.  He  may  try  to 
keep  them  out  of  our  ELINT  field  of  view  by  restricting  the 
time  and  power  of  his  emissions.  They  would  be  brought 
Into  the  field  of  view  by  expanding  the  duration  of  coverage, 
or  by  deploying  more  sensitive  sensors.  This  affects  both 
the  enemy's  ability  to  avoid  coverage,  and  his  ability  to 
remain  undetected  In  the  presence  of  a collector.  The 
enemy  might  also  seek  to  cover  the  mass  deployment  of 
radars  forward  by  testing  them  Individually,  so  that  the 
overall  level  of  SAM  radar  activity  In  a given  area  does  not 
change.  This  can  he  uncovered  by  Increasing  the  ability  to 
discriminate  among  the  radar  signals  of  different  units  with 
the  same  types  of  radars. 

Multiple  Discipline  Techniques 

Multiple  discipline  techniques  seek  to  break  down 
Inconsistencies  between  two  or  more  observables  associated 
with  the  same  key  activity.  The  first  step  In  applying  these 
techniques  Is  to  take  advantage  of  the  means  matrix  to 
Identify  the  opportunities  for  multiple  discipline 

correlation,  There  follows  a determination  of  whether  the 
current  collection  schedules  for  the  sensors  Involved  allow 
simultaneous  coverage.  Planning  for  such  coverage 

Increases  the  burden  of  activity  required  to  maintain  a 
deception.  Finally,  the  analyst's  ability  to  make  effective 
use  of  multi-source  coverage  requires  that  that  the 
Interpretation  of  the  collection  be  organized  by  activity. 
For  the  radar  In  the  above  example,  therefore,  the  analyst 
would  be  given  the  PHOT1NT,  ELINT  and  other  coverage  for 
a particular  area  over  a specified  time  range.  Multiple 
discipline  techniques  make  cover  difficult  at  the  tactical 
level,  and  make  simulation  extremely  difficult,  since  the 
effort  required  to  simulate  an  activity  In  many  dlffernt 


disciplines  may  be  greater  than  the  effort  required  by  the 
activity  Itself. 

Analytical  Techniques 

Reyond  current  collection  and  exploitation  the 
Intelligence  analyst  can  uncover  a C&D  operation  by 
comparing  current  activity  with  the  knowledge  base  of  an 
opponents  capabilities  and  options.  These  comparisons  are 
Intelligence  cross-discipline  consistency  checks,  In  which 
current  Intelligence  is  matched  with  basic  Intelligence  on 
the  one  hand  and  threat  assessment  on  the  other. 

Basic  Intelligence  provides  the  analyst  with  a reference 
of  what  an  opponent  can  do.  This  Includes  the  physical 
capabilities  of  equipment-can  a mobile  radar  deploy  from  A 
to  R In  a given  time?  In  addition,  It  provides  an 
organizational  and  doctrinal  reference  for  current  activity. 
These  are  particularly  useful  In  evaluating  the  activity  of 
the  Soviet  military,  which  has  minimized  organizational 
variations  and  which  does  not  encourage  deviations  from 
standard  operating  procedures.  A simulated  SAM  battalion, 
for  example,  must  Include  the  correct  number  and  relative 
location  of  radars,  launchers  and  communications 
equipment.  From  the  organizational  and  doctrinal 
standpoint,  It  must  be  co-loeated  with  one  of  a limited 
number  of  other  types  of  units,  Piscrepancles  In  any  of 
these  lacto>*.  becomes  the  basis  for  requests  for  additional 
collection,  end  for  expanding  the  scope  of  the  analytical 
evaluation. 

Once  the  time  and  space  relationships  between 
indicators  and  an  opponent's  likely  courses  of  action  have 
been  established,  these  can  also  help  uncover  a CAP 
operation,  and  can  also  help  the  analyst  recognize  when  the 
actual  course  of  action  does  not  match  any  of  the 
hypothesis.  One  of  the  major  benefits  of  the  structured 
warning  systems  Is  that  the  analyst  can  be  alerted  to  the 
Inconsistent  absence  of  activity.  This  absence  could  occur 
under  any  of  the  following  conditions! 

• the  activity  is  present,  but  Is  being  covered 

• the  activity  not  present,  and  the  other  key  activities 
are  being  staged 

• the  activity  Is  not  present,  and  the  other  activities 
are  part  of  a course  of  action  outside  the  current 
range  of  hypotheses 

The  analyst  can  Identify  which  explanation  applies  by 
Increasing  collection  and  exploitation  effort  to  uncover 
activities  If  It  exists.  If  It  Is  not  found,  solutions  must  be 
sought  along  both  collection  and  analysis  paths. 

In  the  collection/interpretatlon  domain,  Increased 
effort  would  be  applied  to  determine  if  some  of  the 
observed  activities  are  actually  simulations.  At  the  same 
time,  the  threat  assessment  process  needs  to  reevaluate 
whether  the  absent  activity  Is  a necessary  part  of  a course 
of  action,  and  whether  a new  hypothesis  would  be  consistent 
with  the  current  combination  of  active  and  Inactive 
Indicators.  The  discovery  of  C&P  operations  during  this 
process  has  an  additional  value  In  that  their  exlstance  Is 
Itself  an  Indication  of  an  opponent's  course  of  action. 

Conclusions 

Current  collection,  exploitation  and  Intelligence 
analysis  systems  are  vulnerable  to  cover  and  deception. 
This  vulnerability  has  Increased  as  analytical  aids  have 
tended  to  focu9  on  the  observables  associated  with  the  key 
steps  for  a limited  range  of  courses  of  action.  Soviet 
doctrine,  with  its  emphasis  on  surprise  _nd  continuing 
variations  in  the  means  of  realizing  surprise,  is  Ideally 
suited  to  exploit  those  limitations,  and  they  have  been 
uniformly  successful  in  applying  this  doctrine  to  the  present 
day.  Both  current  analysis  aids,  which  are  essentially 
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production  systems,  and  the  expert  systems  now  under 
development  p]are  basically  similar  to  commercial  systems 
developed  for  medical,  geological  or  engineering 
applications.  [9]  For  successful  application  to  military 
Intelligence,  the  technology  must  be  "hardened"  to 
withstand  the  skillful  use  of  Cover  and  Deception. 
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